Which two statements correctly describe the victim demographics section of the VERIS schema? (Choose two.)

The victim demographics section uses general organizational descriptors such as industry vertical, employee count, and revenue range to characterize the victim without disclosing the organization's actual name, preserving anonymity while still enabling data sharing.

By capturing standardized organizational attributes, victim demographics allows analysts to compare incident patterns across different organization types, sizes, or departments to identify trends in who is being targeted.

General information about the incident itself (actor, action, asset, attribute) is captured in the incident description section, not victim demographics.

While victim demographics may include country or region data, it explicitly avoids identifying the organization by name - geolocation is used only to categorize geography, not to expose the victim's identity.